CVE-2025-20219
Description
A vulnerability in the implementation of access control rules for loopback interfaces in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should have been blocked to a loopback interface. This vulnerability is due to improper enforcement of access control rules for loopback interfaces. An attacker could exploit this vulnerability by sending traffic to a loopback interface on an affected device. A successful exploit could allow the attacker to bypass configured access control rules and send traffic that should have been blocked to a loopback interface on the device.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Cisco Adaptive Security Appliance (ASA) Software | 9.18.2, 9.18.2.5, 9.18.2.7, 9.19.1, 9.18.2.8, 9.18.3, 9.19.1.5, 9.19.1.9, 9.18.3.39, 9.19.1.12, 9.18.3.46, 9.19.1.18, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.20.1, 9.19.1.22, 9.18.4, 9.20.1.5, 9.18.4.5, 9.19.1.24, 9.18.4.8, 9.20.2, 9.19.1.27, 9.18.4.22, 9.20.2.10, 9.19.1.28, 9.18.4.24, 9.20.2.21, 9.19.1.31, 9.18.4.29, 9.20.2.22, 9.18.4.34, 9.20.3, 9.18.4.40, 9.22.1.1, 9.20.3.4, 9.18.4.47, 9.20.3.7, 9.19.1.37, 9.20.3.9, 9.19.1.38, 9.18.4.50, 9.22.1.2 | — |
| Cisco Cisco Firepower Threat Defense Software | 7.3.0, 7.3.1, 7.3.1.1, 7.4.0, 7.4.1, 7.4.1.1, 7.3.1.2, 7.6.0, 7.4.2, 7.4.2.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.